Privacy Policy
1. Data protection at a glance
General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is all data via which you can be personally identified. For detailed information on the subject of data protection, please refer to our Privacy Policy set out below this text.
Data collection on this website
Who is the data controller for the collection of data on this website?
Data processing on this website is carried out by the website operator. You can find the operator's contact details in the section "Details of the data controller" in this Privacy Policy.
How do we collect your data?
Your data is collected when you provide it to us. This may be data that you enter on a contact form, for example.
Other data is automatically collected by our IT systems when you visit the website or after you have given your consent. This is mainly technical data (e.g. internet browser, operating system or time that the page was accessed). This data is collected automatically, as soon as you access this website.
What do we use your data for?
Part of the data is collected to ensure that the website is provided free of errors. Other data can be used to analyse your user behaviour.
What rights do you have when it comes to your data?
You have the right to of access free of charge at any time to information regarding the origin, recipient and purpose of your stored personal data. You also have the right to request that this data is corrected (rectified) or deleted (erased). If you have given your consent to data being processed, you may withdraw such consent at any time with effect for the future. You also have the right to request, under certain circumstances, that the processing of your personal data is restricted. You also have the right to lodge a complaint with the competent supervisory authority.
You can contact us at any time with any further questions relating to data protection.
Analysis tools and third-party tools
When you visit this website, your browsing behaviour may be analysed statistically. This is mainly done using analytics programs.
You can find detailed information about these analytics programs in the Privacy Policy below.
2. Hosting
External hosting
This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster's servers. This may include, but is not limited to the following: IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access and other data generated via a website.
The hoster is used for the purpose of performing a contract with our potential and existing customers (Article 6(1)(b) GDPR) and in the interest of providing a secure, fast and efficient website via a professional provider (Article 6(1)(f) GDPR). If applicable consent has been requested (e.g. consent to the storage of cookies), processing is based exclusively on Article 6(1)(a) GDPR and Section 25(1) of the German Telecommunications and Telemedia Data Protection Act (TDDDG), where the consent includes the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the German Telecommunications and Telemedia Data Protection Act (TDDDG). Your consent may be withdrawn at any time.
Our hoster only processes your data to the extent necessary to perform its services and it follows our instructions regarding your data.
We use the following hoster:
Everscreen Medienagentur - Kubon & Dittmar GbR
Corunnastrasse 6
58636 Iserlohn, Germany
Processing on behalf of the data controller
This is an agreement required by data protection law, which ensures that this company only processes the personal data of our website visitors in accordance with our instructions and in compliance with GDPR.
3. General and mandatory information
Data protection
The operators of this site take the protection of your personal data very seriously. We handle your personal data confidentially, in accordance with the statutory data protection regulations and this Privacy Policy.
When you use this website, various types of personal data are collected. Personal data is data that can be used to identify you personally. This Privacy Policy explains what data we collect and what we use it for. It also explains how and for what purpose we collect and use your data.
Please note that sending data over the Internet (e.g. communicating by email) may not be secure. Fully protecting data against being accessed by third parties is not possible.
Details of the data controller
The data controller for data processing on this website is:
schmale Maschinenbau GmbH
Altenaer Strasse 95
58762 Altena, Germany
Tel.: +49 (0) 23 52 / 548 64-0
Email: info@schmale-gmbh.de
The controller means the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).
Retention period
Unless a more specific retention period is stated within this Privacy Policy, we retain your personal data until the purpose for processing the data no longer applies. If you make a justified request for your data to be deleted (erased) or withdraw your consent to data processing, your data will be deleted, unless we have other legal grounds storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data will be deleted (erased) once such reasons no longer apply.
General information on the legal bases for data processing on this website
If you have consented to data processing, we process your personal data on the basis of Article 6(1)(a) GDPR or Article 9(2(a) GDPR if special categories of data are processed in accordance with Article 9(1) GDPR. If you have given explicit consent to personal data being transferred to third countries, data is also processed on the basis of Article 49(1)(a) GDPR. If you have consented to cookies being created or to information on your device being accessed (e.g. via device fingerprinting), data is also processed on the basis of Section 25 (1) of the German Telecommunications and Telemedia Data Protection Act (TDDDG). Your consent may be withdrawn at any time. If your data is required for the performance of a contract or to take steps prior to entering into a contract, we process your data on the basis of Article 6(1)(b) GDPR. We also process your data if necessary to comply with a legal obligation, on the basis of Article 6(1)(c) GDPR. Data processing may also be based on our legitimate interest pursuant to Article 6(1)(f) GDPR. Information about the relevant legal basis in each case is provided in the following paragraphs of this Privacy Policy.
Data protection officer
We have appointed a data protection officer for our company.
Andreas Schmale
+49-2352-54864-14
Email: Andreas.Schmale@schmale-gmbh.de
Information about data transfer to the USA and other third countries
We also use tools provided by companies based in the USA or other third countries that are not secure countries under data protection law. When these tools are active, your personal data may be transferred to and processed in such third countries. Please note that it is not possible to guarantee the same level of data protection in such countries as in the EU. For example, US companies are obliged to hand over personal data to security authorities without you as a data subject being able to take legal action to prevent them sharing your data. It is therefore not possible to rule out that US authorities (e.g. intelligence services) process, analyse and permanently store your data that is on US servers for surveillance purposes. We have no influence over these processing activities.
Withdrawal of your consent to data processing
Many data processing operations are only possible with your express consent. You can withdraw consent given previously at any time. The lawfulness of the processing of data up to the date of withdrawal remains unaffected by withdrawal.
Right to object to data collection in special cases and to direct marketing (Article 21 GDPR)
IF THE DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ARTICLE 6(1) (E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RELEVANT LEGAL BASIS FOR PROCESSING IS PROVIDED IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21(1) GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS INCLUDES PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL THEN NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION UNDER ARTICLE 21(2) GDPR).
Right to lodge a complaint with the competent supervisory authority
In the event of infringements of GDPR, data subjects have a right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement. You have a right to lodge a complaint exists irrespective of any other administrative or judicial remedies.
Right to data portability
You have the right to have data, which we process automatically on the basis of your consent or in performance of a contract, provided to you or to a third party in a commonly used and machine-readable format. If you request that the data is transmitted directly to another data controller, this will only be done if technically feasible.
Access, deletion (erasure) and correction (rectification)
Under the applicable statutory provisions, you have the right of access free of charge at any time to your stored personal data, its origin and recipients, the purpose of the data processing and, if applicable, a right to have your data corrected (rectified) or deleted (erased). You can contact us at any time with any further questions about personal data.
Right to restriction of processing
You have the right to request that the processing of your personal data is restricted. You can contact us at any time for this purpose. You have a right to restriction of processing in the following cases:
- If you contest the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of verification, you have the right to request that the processing of your personal data is restricted.
- If the processing of your personal data was/is unlawful, you may request restriction of data processing instead of deletion (erasure).
- If we no longer need your personal data, but you need it for the establishment, exercise or defence of legal claims, you have the right to request restriction of the processing of your personal data instead of deletion (erasure).
- If you have lodged an objection in accordance with Article 21(1) GDPR, a balance must be struck between your interests and ours. Until it has been determined whose interests are overriding, you have the right to request that the processing of your personal data is restricted.
If you have restricted the processing of your personal data, such data – other than its storage – may only be processed with your consent or for the establishment, exercise or defence of legal claims or to protect the rights of another natural or legal person or on the grounds of an important public interest of the European Union or a Member State.
SSL and TLS encryption
This site uses SSL and TLS encryption for security and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser’s address bar.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Objection to promotional emails
We hereby object to the contact details published under the Legal Notice being used to send promotional or information material that has not been expressly requested. The operators of the website expressly reserve the right to take legal action in the event of the unsolicited sending of promotional information, such as spam emails.
4. Data collection on this website
Cookies
Our website uses cookies. Cookies are small text files and do not cause any harm on your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or until they are automatically deleted by your web browser.
In some cases, cookies from third-party companies may also be stored on your device when you access our site (third-party cookies). Such cookies allow us or you to use certain services provided by the third-party company (e.g. cookies for payment processing services).
Cookies have various functions. A lot of cookies are technically necessary, as certain features of the website would not work without them (e.g. the shopping cart or video playback). Other cookies are used to analyse user behaviour or to display advertising.
Cookies that are necessary to carry out the electronic communication process, to provide certain functions that you have requested (e.g. shopping cart) or to optimise the website (e.g. cookies to measure the web audience) (necessary cookies) are stored on the basis of Article 6(1)(f) GDPR, unless another legal basis is stated. The website operator has a legitimate interest in storing necessary cookies to provide its services free of technical errors and optimised. If consent to the storage of cookies and comparable recognition technologies has been requested, processing is based exclusively on such consent (Article 6(1)(a) GDPR and Section 25(1) of the German Telecommunications and Telemedia Data Protection Act (TDDDG); consent can be withdrawn at any time.
You can set up your browser so that you are informed about cookies being created and allow cookies only in specific cases, prevent cookies in certain cases or in general and enable the automatic deletion of cookies when the browser is closed. If you disable cookies, the functionality of this website may be limited.
If cookies are used by third-party companies or for analysis purposes, we inform you about this separately in this Privacy Policy and, if necessary, request your consent.
Server log files
The provider of the website automatically collects and stores information in server log files, which your browser automatically transmits to us.
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
This data is not combined with other data sources.
This data is collected on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in presenting its website free of technical errors and in optimising it – the server log files have to be collected for this purpose.
Contact form
If you send us enquiries via the contact form, we store your details from the enquiry form, including the contact details you provide on the form, for the purpose of processing the enquiry and in the event of any follow-up queries. We do not pass on this data without your consent.
This data is processed on the basis of Article 6(1)(b) GDPR, insofar as your enquiry is connected to the performance of a contract or is necessary to carry out steps prior to entering into a contract. In all other cases, the processing is based on our legitimate interest in effectively handling the enquiries addressed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), provided your consent has been requested; you may withdraw consent at any time.
We retain the data you enter on the contact form until you request that we delete it (erasure), you withdraw your consent to its storage, or the purpose for which it was stored ceases to apply (e.g. after your enquiry has been dealt with). Mandatory statutory provisions – in particular retention periods – remain unaffected.
Enquiry by email, telephone or fax
If you contact us by email, telephone or fax, your enquiry including all personal details (name and enquiry) is stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent.
This data is processed on the basis of Article 6(1)(b) GDPR, insofar as your enquiry is connected to the performance of a contract or is necessary to carry out steps prior to entering into a contract. In all other cases, the processing is based on our legitimate interest in effectively handling the enquiries addressed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), provided your consent has been requested; you may withdraw consent at any time.
We retain the data you send us via contact requests until you request that we delete it (erasure), you withdraw your consent to its storage, or the purpose for which it was stored ceases to apply (e.g. after your enquiry has been dealt with). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.
5. Analytics tools and advertising
Google Analytics
This website uses functions provided by the Google Analytics web analytics service. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics allows the website operator to analyse the behaviour of website visitors. When analysing behaviour, the website operator receives various types of usage data, such as page views, duration of visit, operating systems used and the origin of the user. This data is assigned to the user's relevant device. It is not assigned to a user ID.
Google Analytics also allows us to record your mouse and scroll movements and clicks, as well as other data. In addition, Google Analytics uses various modelling approaches to augment the data that is collected and machine learning technologies for data analysis.
Google Analytics uses technologies that allow the user to be recognised for the purpose of analysing user behaviour (e.g. cookies and device fingerprinting). The information collected by Google about the use of this website is normally transferred to a Google server in the USA and stored there.
Use of this service is based on your consent according to Article 6(1)(a) GDPR and Section 25(1) of the German Telecommunications and Telemedia Data Protection Act (TDDDG). Your consent may be withdrawn at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. For details, go to: privacy.google.com/businesses/controllerterms/mccs/.Data transfer to the USA is based on the standard contractual clauses of the EU Commission.
Browser plugin
You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
For more information about how Google Analytics handles user data, please see Google’s Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=en.
Processing on behalf of the data controller
We have concluded a data processing agreement (DPA) with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
6. Newsletter
Newsletter data
If you would like to receive the newsletter provided on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the email address provided and we require your consent to receiving the newsletter. Other data is not collected or is only collected a voluntary basis. We use this data exclusively to send the requested information and we do not pass it on to third parties.
The data entered on the newsletter registration form is processed exclusively on the basis of your consent (Article 6(1)(a) GDPR). You can withdraw your consent to the storage of the data, the email address and use of such data to send the newsletter at any time, for example via the "Unsubscribe" link in the newsletter. The lawfulness of the data processing operations already carried out up to the date of withdrawal remains unaffected by withdrawal.
We or the newsletter service provider store the data you provide to us for the purpose of receiving the newsletter until you unsubscribe from the newsletter and such data is deleted (erased) from the newsletter distribution list after you unsubscribe from the newsletter or after the purpose no longer applies. We reserve the right to delete or block email addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest pursuant to Article 6(1)(f) GDPR.
Data that has been stored by us for other purposes remains unaffected.
After you have unsubscribed from the newsletter distribution list, we or the newsletter service provider store your email address in a blacklist, if necessary to prevent future mailings. The data from the blacklist is only used for this purpose and is not combined with other data. This serves both your interest and our interest in complying with statutory requirements when sending newsletters (legitimate interest within the meaning of Article 6 (1)(f) GDPR). Addresses are stored on the blacklist permanently. You may object to the storage, if your interests outweigh our legitimate interest.
7. Plugins and tools
YouTube
This website embeds videos provided by the YouTube website. The website operator is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
When you visit one of our websites that has embedded YouTube content, a connection to YouTube's servers is established. This tells the YouTube server which of our pages you have visited.
YouTube may also store various cookies on your device or use comparable technologies for recognition (e.g. device fingerprinting). YouTube can obtain information about visitors to this website in this way. This information is used to collect video statistics, improve the user experience and prevent fraud.
If you are logged into your YouTube account, you allow YouTube to link your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.
YouTube is used in the interest of providing an appealing website. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR. If applicable consent has been requested (e.g. consent to the storage of cookies), processing is based exclusively on Article 6(1)(a) GDPR and Section 25(1) of the German Telecommunications and Telemedia Data Protection Act (TDDDG), where the consent includes the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the German Telecommunications and Telemedia Data Protection Act (TDDDG). Your consent may be withdrawn at any time.
For more information about how YouTube handles user data, please see YouTube’s Privacy Policy: https://policies.google.com/privacy?hl=en.
Google Web Fonts
This site uses Web Fonts provided by Google to display fonts consistently across the website. When you access a page, your browser loads the required Web Fonts to your browser cache in order to display text and fonts correctly.
The browser you use has to connect to Google's servers for this purpose. Google then knows that this website has been accessed via your IP address. The use of Google Web Fonts is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in the fonts on its website being consistent. If applicable consent has been requested (e.g. consent to the storage of cookies), processing is based exclusively on Article 6(1)(a) GDPR and Section 25(1) of the German Telecommunications and Telemedia Data Protection Act (TDDDG), where the consent includes the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the German Telecommunications and Telemedia Data Protection Act (TDDDG). Your consent may be withdrawn at any time.
If your browser does not support Web Fonts, your computer uses a default font.
For more information about Google Web Fonts, go tohttps://developers.google.com/fonts/faq and see Google's Privacy Policy: https://policies.google.com/privacy?hl=en.
Google Maps
This site uses the Google Maps service. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
To use the features of Google Maps, your IP address has to be stored. The information is normally transferred to a Google server in the USA and stored there. The provider of this site has no influence over the transfer of this data. When Google Maps is activated, Google may use Google Web Fonts for the purpose of displaying fonts consistently. When you access Google Maps, your browser loads the required Web Fonts to your browser cache in order to display text and fonts correctly.
We use Google Maps in the interest of providing an appealing website and to help you find the locations we list on the website easily. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR. If applicable consent has been requested (e.g. consent to the storage of cookies), processing is based exclusively on Article 6(1)(a) GDPR and Section 25(1) of the German Telecommunications and Telemedia Data Protection Act (TDDDG), where the consent includes the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the German Telecommunications and Telemedia Data Protection Act (TDDDG). Your consent may be withdrawn at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. For details, go to: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
For more information about how Google handles user data, please see Google’s Privacy Policy: https://policies.google.com/privacy?hl=en.
8. Services provided by the data controller
Handling job applicant data
You can submit job applications to us (e.g. by email, by post or via an online application form). Below, we provide information about the scope, purpose and use of the personal data collected from you during the application process. Please be assured that your data is collected, processed and used in accordance with the applicable data protection rights and all other statutory provisions and that your data is treated as strictly confidential.
Scope and purpose of data collection
When you send us an application, we process your associated personal data (e.g. contact and communication details, application documents, notes taken during interviews, etc.) to the extent that this is necessary to decide on the establishment of an employment relationship. The legal basis for this is Section 26 of the German Federal Data Protection Act (BDSG) (steps prior to entering into an employment relationship), Article 6(1)(b) GDPR (general steps prior to entering into a contract) and – provided you have given your consent – Article 6(1)(a) GDPR. Your consent may be withdrawn at any time. Within our company, your personal data is only shared with individuals involved in the processing of your job application.
If you application is successful, the data submitted by you is stored in our data processing systems on the basis of Section 26 of the German Data Protection Act (BDSG) and Article 6(1)(b) GDPR for the purpose of implementing the employment relationship.
Data retention period
If we are unable to make you a job offer, if you reject a job offer or withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Article 6(1)(f) GDPR) for up to 6 months from the end of the application procedure (rejection or withdrawal of the application). The data is then deleted and the physical application documents are destroyed. The retention serves in particular as evidence in the event of a legal dispute. If it is evident that the data will be required after the 6-month period has expired (e.g. because of impending or pending legal dispute), the data is only deleted when the purpose for further retention no longer applies.
Data may also be retained for longer if you have given your consent (Article 6(1)(a) GDPR) or if statutory retention obligations prevent deletion (erasure).
9. Cookienote
Consent to cookies with Cookienote
This website uses cookie consent technology provided by Cookienote to obtain your consent to the storage of certain cookies on your device and to document your consent in accordance with data protection regulations. This technology is provided by Everscreen Medienagentur - Kubon & Dittmar GbR, Corunnastrasse 6, 58636 Iserlohn, Germany, Website: www.everscreen.de (hereafter referred to as "Cookienote"). When you access our website, the following personal data is transferred to Cookienote:
Your consent(s) or the withdrawal of your consent(s)
* Your IP address (anonymised)
* Information about your browser
* Information about your device
* Time of your visit to the website
Cookienote also stores a cookie in your browser to be able to link the consents given or the withdrawal of consents to you. The data collected in this way is stored until you request that we delete it, you delete the Cookienote cookie yourself or until the purpose for which the data is retained no longer applies. You can change your selected cookie settings at any time via the "Change settings" button.
Mandatory legal obligations to retain data remain unaffected. Cookienote is used to obtain the legally required consents for the use of cookies.
The legal basis for this is Article 6(1)(c) GDPR.
Last updated: 21/07/2022